PT-2024-15650 · Git+2 · Anything-Llm+1

Published 2024-02-27 · Updated 2025-01-10 · CVE-2024-0550

Positive Technologies (AI Summary)

CVSS v3.1

9.6

Critical

Base vector

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions.

Description A user who is already privileged as manager or admin can exploit this issue by setting their profile picture via the frontend API using a relative filepath. This allows them to use the PFP GET API to download any valid files. The attacker must have been granted privileged permissions to the system before executing this attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Relative Path Traversal

Weakness Enumeration

CWE-23

Related Identifiers

CVE-2024-0550

Affected Products

Anything-Llm

Mintplex-Labs/Anything-Llm

References · 7

• 🔥 https://huntr.com/bounties/c6afeb5e-f211-4b3d-aa4b-6bad734217a6 · Exploit
• https://github.com/mintplex-labs/anything-llm/commit/e1dcd5ded010b03abd6aa32d1bf0668a48e38e17 · Patch
• https://osv.dev/vulnerability/CVE-2024-0550 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-0550 · Security Note
• https://twitter.com/CVEnew/status/1762708121540022280 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1762727921251168673 · Twitter Post
• https://t.me/cvenotify/72526 · Telegram Post